937 matches found
Linux Kernel 3.x (Ubuntu 14.04 / Mint 17.3 / Fedora 22) - Double-free usb-midi SMEP Privilege Escalation
Source: https://xairy.github.io/blog/2016/cve-2016-2384 Source: https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 Source: https://www.youtube.com/watch?v=lfl1NJn1nvo Exploit-DB Note: This requires physical access to the machine, as well as local access on the system. - - - This...
UBUNTU-CVE-2016-2384
Double free vulnerability in the sndusbmidicreate function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service panic or possibly have unspecified other impact via vectors involving an invalid USB descriptor...
PT-2016-1252
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description The issue is related to a double free vulnerability in the Linux kernel's USB-MIDI driver, which can be exploited to execute arbitrary code or cause a denial of service. This vulnerability is...
Racing MIDI messages in Chrome
This is a guest blog post by Oliver Chang from the Chrome Security team. This post is about an exceptionally bad use after free bug in Chrome’s browser process that affected Linux, Chrome OS and OS X. What makes this bug interesting is the fact that it could be directly triggered from the web...
Debian DSA-3456-1 : chromium-browser - security update
Several vulnerabilities were discovered in the chromium web browser. - CVE-2015-6792 An issue was found in the handling of MIDI files. - CVE-2016-1612 cloudfuzzer discovered a logic error related to receiver compatibility in the v8 JavaScript library. - CVE-2016-1613 A use-after-free issue was...
Debian: Security Advisory (DSA-3456-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome Multiple Vulnerabilities (Jan 2016) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Google Chrome Multiple Vulnerabilities (Jan 2016) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Google Chrome Multiple Vulnerabilities (Jan 2016) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Google Chrome MIDI Subsystem Application Crash Vulnerability
Google Chrome is a web browsing tool developed by Google. In versions of Google Chrome prior to 47.0.2526.106, the MIDI subsystem does not properly handle data sending. A remote attacker could cause a denial of service or execute arbitrary code by exploiting this vulnerability...
Google Chrome MIDI subsystem application crash vulnerabilities(CVE-2 0 1 5-6 7 9 2)-vulnerability warning-the black bar safety net
Affected system: Google Chrome 47.0.2526.106 Description: CVECAN ID: CVE-2 0 1 5-6 7 9 2 Google Chrome is developed by Google, a Web browsing tool. Google Chrome 47.0.2526.106 the previous version, the MIDI subsystem does not properly handle data transmission, remote attacker could exploit this...
UBUNTU-CVE-2015-6792
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...
CVE-2015-6792
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...
CVE-2015-6792
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...
Design/Logic Flaw
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...
CVE-2015-6792
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...
CVE-2015-6792
The CVE-2015-6792 entry affects Google Chrome’s MIDI subsystem prior to 47.0.2526.106. The issue concerns improper handling of MIDI data sent by the MIDI subsystem, enabling a remote attacker to cause a crash or execute arbitrary code via unspecified vectors (cited in midi_manager.cc, midi_manage...
CVE-2015-6792
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...
CVE-2015-6792
Removed by vendor...
CVE-2015-6792: Undefined Security Weakness
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors, related to midimanager.cc, midimanageralsa.cc, and...